PT-2022-8976

CVE-2020-36525

Published

2022-06-03

Updated

2022-06-11

Description by

CVSS 3.1

5.4

Medium

MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Linking (affected versions not specified)

Description A problematic vulnerability has been found in Linking, affecting an unknown part of the New Windows Macro component. This issue leads to cross-site scripting and can be initiated remotely. The exploit has been disclosed to the public and may be used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Daniel Teuchert

Roman Ferdigg

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers